Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.cer
File:                     C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.cer (raw, json)
Hash identifier:          o5X+5jW6n2/wvVwWH28etisLDXoMskW/hCgsr4Q+WLs=
Subject key identifier:   C2:E8:75:13:F9:0F:19:82:7C:FF:91:EC:AD:41:7B:F0:F1:AB:BB:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B48D3BAC2D39D3304C81F1CFEF11F8F1156F16A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jun 2023 14:39:38 +0000
Certificate not after:    Thu 27 Jun 2024 14:44:38 +0000
Subordinate resources:    AS: 53019
                          IP: 177.70.160.0/20
                          IP: 2804:5dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:48:d3:ba:c2:d3:9d:33:04:c8:1f:1c:fe:f1:1f:8f:11:56:f1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 29 14:39:38 2023 GMT
            Not After : Jun 27 14:44:38 2024 GMT
        Subject: CN=C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ce:53:82:36:6d:15:4f:ec:e3:f9:84:76:4b:
                    10:e4:f3:e5:1e:7b:73:a2:7c:1e:74:a5:e9:cc:42:
                    a5:31:84:91:22:ad:1b:4f:f2:e0:23:cf:f4:2c:9e:
                    96:49:40:19:8c:b8:da:f4:0e:3c:e2:d4:f1:bb:d8:
                    b2:35:b1:c5:f5:0a:da:a7:de:dd:c8:c9:27:f2:cf:
                    dc:a0:40:5d:86:8f:5c:66:30:78:20:8c:4c:9f:08:
                    37:af:03:26:7f:12:30:4f:07:3b:ce:c0:90:de:ac:
                    19:36:f3:70:cb:6d:37:29:b0:c6:7b:d5:da:2d:d3:
                    df:d6:fc:c3:54:2d:24:68:8b:ad:27:ae:34:ec:8b:
                    f4:d8:41:c6:02:df:e5:75:cd:b2:37:75:a5:6b:b3:
                    37:4c:d0:9a:96:b8:c8:73:96:06:c4:43:7e:5a:23:
                    cb:fc:d1:7c:5c:00:74:4e:b6:de:ca:22:d1:dc:0e:
                    83:9e:6d:85:ab:6c:9f:77:3a:f0:c5:9d:c6:ae:5d:
                    eb:62:1d:b4:54:2b:88:8f:be:cc:69:a9:5a:87:3a:
                    eb:f7:e3:ce:61:0e:cc:a5:7d:87:e4:8c:06:b2:fb:
                    88:1f:91:46:47:e5:53:78:d6:c0:1a:52:ad:2f:1e:
                    15:c2:d4:34:26:9a:d0:27:b2:03:92:d8:db:48:cc:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:E8:75:13:F9:0F:19:82:7C:FF:91:EC:AD:41:7B:F0:F1:AB:BB:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/1/C2E87513F90F19827CFF91ECAD417BF0F1ABBBDD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20
                IPv6:
                  2804:5dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53019

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:86:69:51:1f:3a:8d:3e:02:c3:80:51:97:3f:59:9f:8b:
         bc:1e:dc:73:14:7a:5e:e7:28:95:02:ee:25:ab:6a:0d:76:f9:
         32:95:dd:ae:d1:30:07:51:80:e9:88:e5:8f:f5:2b:04:3e:60:
         43:36:b0:e9:fd:18:05:6e:38:1b:38:2a:ab:98:38:28:e8:e1:
         a7:3d:e4:61:8f:59:13:9c:fb:14:80:ff:81:33:cb:29:46:e1:
         a1:31:bb:87:93:15:40:3f:de:0f:0e:56:f4:6a:16:be:20:7a:
         1c:eb:00:44:45:7b:ff:5c:39:f9:45:f6:cb:9d:27:ae:bb:7a:
         b4:bd:bf:5c:89:77:b3:b3:69:cd:15:1b:59:3c:39:93:1a:f0:
         3d:f1:d5:dd:0f:f1:58:05:99:15:68:3d:06:80:15:b2:dd:d3:
         36:6b:b4:f9:64:2d:68:f9:63:98:e5:ef:e8:c4:86:75:3b:c4:
         fd:66:6e:d5:05:3b:f6:0d:eb:f8:34:ab:90:d3:cb:bd:be:90:
         20:2b:7b:87:01:89:d7:12:fa:c3:8d:cd:3d:55:31:a2:dd:28:
         b5:d3:59:17:84:6e:30:26:68:be:75:b4:78:a6:e1:e6:a9:cf:
         a1:4c:86:5a:13:28:f9:51:c9:c7:6d:47:cc:e8:00:ac:ff:f7:
         1e:b6:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----